As previously reported, ConnectWise identified unauthorized access to application credentials associated with Cloud Backup, formerly SkyKick.

ConnectWise have begun restoring services in controlled phases, following remediation and security validation.

Their teams and independent specialists continue validating the affected environment, with each restoration step subject to security review.

They expect restoration to take several days. Service availability will return in stages, and the start of restoration does not mean all capabilities are available. We recognize the continued disruption to your business and customers and remain focused on restoring service safely.

Partner reconnection instructions:

ConnectWise will publish step-by-step instructions explaining when and how partners should reconnect affected services, including any required reauthorization and verification steps. Keep affected application connections disabled until ConnectWise provides formal instructions for your service.

ConnectWise will share service-specific availability and more precise restoration timing as they are confirmed.

Technical resources for partners:

Reviewing individual Microsoft 365 environments remains essential as restoration progresses. ConnectWise's technical investigation and remediation guide provides detailed steps for reviewing your own tenant and each managed customer tenant, including legacy SkyKick integrations.

ConnectWise's technical webinar series continues every two hours to help partners apply the guidance. Sessions provide hands-on walkthroughs of Microsoft Entra ID sign-in and audit logs, application registrations, credentials, and permissions. Please register for an upcoming session and share these resources with the administrators responsible for your customer environments.

Investigation and monitoring:

Investigation continues alongside restoration. Existing backup archives remain encrypted, isolated, and preserved, with no indication of compromise. These findings do not establish whether individual partner or customer Microsoft 365 environments were affected.

The ConnectWise Team continue to monitor their partner-facing services and broader environment around the clock, with no indication that other ConnectWise products, services, or offerings are impacted.